Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-02-04 | crypto: Remove expired certs from CNNIC whitelist | Shigeki Ohtsu | |
CNNIC Whitelist was updated with removing expired certificates. Fixes: https://github.com/nodejs/node/pull/1895 PR-URL: https://github.com/nodejs/node/pull/9469 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com> Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> | |||
2015-06-16 | crypto: add cert check to CNNIC Whitelist | Shigeki Ohtsu | |
When client connect to the server with certification issued by either CNNIC Root CA or CNNIC EV Root CA, check hash of server certification in the list of CNNICHashWhitelist.inc. If it's not, CERT_REVOKED error returns. See for details in https://blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/ PR-URL: https://github.com/nodejs/io.js/pull/1895 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> |